After you create resource groups, you can designate an administrator for each resource group. Resource group administrators can grant the operation permissions on the resource groups to other users.
Prerequisites
Background information
Before you perform this task, make sure that you understand the relationship between resource group authorization and RAM.
- RAM offers permission management for resource group authorization.
- Resource group authorization uses all the policies in RAM. The policies include system policies and custom policies.
- Resource group authorization grants permissions to RAM users, RAM user groups, or RAM roles.
- The permissions granted by using RAM take effect on all resources under the relevant Alibaba Cloud account. The permissions granted by using resource group authorization only take effect on resources in a specific resource group.